This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json) Hash identifier: Ax3it4+cPeZpMj0phsTJWYrCGoCH7+T71CeeQ2LVaJ8= Subject key identifier: 21:A6:50:44:47:F7:5C:99:C1:06:C1:F0:F1:B0:0E:54:27:92:92:1A Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a Certificate serial: 019AF209AD3F512E4CFBAF873BE8A0BF0387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft Manifest number: 083B Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: 6p7iCfpGtLIxo0LMRpMY9tKQZ0wwgaD6yaeBO5l7IXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ad:3f:51:2e:4c:fb:af:87:3b:e8:a0:bf:03:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=21a6504447f75c99c106c1f0f1b00e542792921a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:1c:f1:3d:23:0b:2c:36:02:72:bf:77:8b: 3b:5c:20:4b:9f:7e:5f:b8:cb:98:65:0c:98:7d:9f: bd:70:23:b9:59:48:be:6e:22:07:23:46:90:84:16: 55:0e:2e:57:65:b7:e3:83:ce:05:9d:9e:bb:e4:84: 21:df:34:2c:99:d3:a7:86:8c:d9:9d:6e:26:e9:cc: 2a:39:7c:29:7a:9a:3f:80:53:31:3f:a1:9a:af:85: 4f:8f:e7:73:bb:25:80:b9:52:f3:97:c2:d4:cd:f9: ee:74:0e:94:58:b1:68:29:73:55:24:8f:72:ac:5f: fb:e4:7b:79:7a:33:ae:2d:ef:cc:ae:3a:e9:be:74: 44:68:37:4b:3a:09:4a:ef:a9:18:33:72:80:a5:07: a1:50:90:a2:21:4d:fe:62:a5:4b:7f:67:04:1a:cf: f2:48:b9:00:af:19:bb:08:6c:41:aa:4f:4c:c9:a8: 17:dd:f6:14:54:84:eb:2f:ce:e0:d4:72:da:3e:0e: c3:86:32:06:7a:01:85:f4:bb:77:8a:7e:74:37:bd: a4:09:15:38:86:78:53:37:df:86:be:b8:47:1e:14: 0d:68:32:22:bc:68:ee:c1:cc:54:2c:58:17:3e:ce: 72:56:9d:57:db:37:53:64:cf:e2:9d:76:22:22:ca: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A6:50:44:47:F7:5C:99:C1:06:C1:F0:F1:B0:0E:54:27:92:92:1A X509v3 Authority Key Identifier: keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5c:54:3e:d7:ad:6d:fd:26:38:10:4b:6f:1c:39:45:d3:b9: e9:49:43:f1:0f:fc:98:67:88:ec:eb:19:d5:66:28:46:90:27: 27:1d:d4:e8:2c:bd:79:10:f1:f6:a6:87:97:c6:4d:8a:5a:8a: 82:4a:ac:23:13:f2:d6:ee:a7:fa:6a:cc:9a:6b:cc:de:0c:7e: 38:5c:01:0e:b5:3b:60:3c:34:f3:e6:43:c1:a6:1b:67:ee:6c: 00:d5:50:cd:9c:ef:23:99:fe:f4:a6:03:3f:74:eb:ab:25:64: 0f:fb:1f:2a:a7:3c:57:33:c7:b4:44:1a:de:d5:ca:4f:77:c9: 1a:ed:ad:60:99:93:da:4b:47:ea:93:26:f1:de:4b:28:43:9c: 26:bb:e9:b9:74:80:d2:f7:0f:6f:65:e9:db:89:a9:23:30:01: 99:2b:31:0f:8d:d7:2f:f3:c9:6f:fe:3a:dc:43:76:c7:37:b8: d3:8c:7c:5b:ef:dd:a7:5a:a7:fd:08:14:84:37:06:d4:c4:77: f6:37:c5:75:20:ab:3f:94:54:f8:0a:4a:53:6a:ff:5d:c9:c1: fe:ac:c8:fc:4d:e0:71:e8:91:1b:92:12:7c:82:d6:31:61:16: eb:f7:1c:29:80:ac:18:20:91:ab:a8:7d:98:a9:e0:1f:57:00: 43:9b:2b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa0/US5M+6+HO+igvwOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjgyNWNjMTBlNGMyMmIzODVjNGEzN2FmOTBmMzBiNjg4 MTQxMWEwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EygyMWE2NTA0NDQ3Zjc1Yzk5YzEwNmMxZjBmMWIwMGU1NDI3OTI5MjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwikc8T0jCyw2AnK/d4s7XCBLn35f uMuYZQyYfZ+9cCO5WUi+biIHI0aQhBZVDi5XZbfjg84FnZ675IQh3zQsmdOnhozZ nW4m6cwqOXwpepo/gFMxP6Gar4VPj+dzuyWAuVLzl8LUzfnudA6UWLFoKXNVJI9y rF/75Ht5ejOuLe/MrjrpvnREaDdLOglK76kYM3KApQehUJCiIU3+YqVLf2cEGs/y SLkArxm7CGxBqk9MyagX3fYUVITrL87g1HLaPg7DhjIGegGF9Lt3in50N72kCRU4 hnhTN9+GvrhHHhQNaDIivGjuwcxULFgXPs5yVp1X2zdTZM/inXYiIsqFVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGmUERH91yZwQbB8PGwDlQnkpIaMB8GA1UdIwQY MBaAFMRoJcwQ5MIrOFxKN6+Q8wtogUEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUt ZDU0OTY5NWU0MzNjLzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUtZDU0OTY5NWU0MzNj LzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFxUPtet bf0mOBBLbxw5RdO56UlD8Q/8mGeI7OsZ1WYoRpAnJx3U6Cy9eRDx9qaHl8ZNilqK gkqsIxPy1u6n+mrMmmvM3gx+OFwBDrU7YDw08+ZDwaYbZ+5sANVQzZzvI5n+9KYD P3TrqyVkD/sfKqc8VzPHtEQa3tXKT3fJGu2tYJmT2ktH6pMm8d5LKEOcJrvpuXSA 0vcPb2Xp24mpIzABmSsxD43XL/PJb/463EN2xze404x8W+/dp1qn/QgUhDcG1MR3 9jfFdSCrP5RU+ApKU2r/XcnB/qzI/E3gceiRG5ISfILWMWEW6/ccKYCsGCCRq6h9 mKngH1cAQ5srtw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:03 2025 by rpki-client